opentext Vulnerability Advisory Catalog

Total 124 security vulnerabilities recorded for opentext software and firmware.

← Back to All Vendors
CVE-2026-3278 MEDIUM
Component: zenworks_service_desk

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allows Cross-Sit...

📅 2026-03-18
CVSS 6.1 Dossier →
Component: vertica

Observable response discrepancy vulnerability in OpenText™ Vertica allows Password Brute Forcing.   The vulnerability could lead to Password Brute For...

📅 2026-03-13
CVSS 7.5 Dossier →
Component: vertica

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.  The vul...

📅 2026-03-13
CVSS 6.1 Dossier →
Component: vertica

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ Vertica allows Reflected XSS.  The vul...

📅 2026-03-13
CVSS 6.1 Dossier →
CVE-2026-3266 CRITICAL
Component: filr

Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF to...

📅 2026-03-03
CVSS 9.8 Dossier →
CVE-2026-1658 MEDIUM
Component: directory_services

User Interface (UI) Misrepresentation of Critical Information vulnerability in OpenText™ Directory Services allows Cache Poisoning.  The vulnerabilit...

📅 2026-02-19
CVSS 5.3 Dossier →
CVE-2025-9208 MEDIUM
Component: web_site_management_server

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allo...

📅 2026-02-19
CVSS 5.4 Dossier →
CVE-2025-8055 MEDIUM
Component: xm_fax

Server-Side Request Forgery (SSRF) vulnerability in OpenText™ XM Fax allows Server Side Request Forgery.  The vulnerability could allow an attacker t...

📅 2026-02-19
CVSS 5.3 Dossier →
Component: xm_fax

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText™ XM Fax allows Path Traversal.  The vulnerab...

📅 2026-02-19
CVSS 7.5 Dossier →
Component: web_site_management_server

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Web Site Management Server allo...

📅 2026-02-19
CVSS 5.4 Dossier →
Component: web_site_management_server

Cross-Site Request Forgery (CSRF) vulnerability in OpenText™ Web Site Management Server allows Cross Site Request Forgery. The vulnerability could mak...

📅 2026-02-19
CVSS 6.5 Dossier →
CVE-2025-8050 MEDIUM
Component: flipper

External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal.  The vulnerability could allow a user to access files ...

📅 2025-10-21
CVSS 6.5 Dossier →
CVE-2025-8053 CRITICAL
Component: flipper

Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. ...

📅 2025-10-20
CVSS 9.1 Dossier →
Component: flipper

SQL Injection vulnerability in opentext Flipper allows SQL Injection.  The vulnerability could allow a low privilege user to interact with the databa...

📅 2025-10-20
CVSS 8.8 Dossier →
CVE-2025-8051 MEDIUM
Component: flipper

Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal.  The vulnerability could allow a user to access files hosted on the ...

📅 2025-10-20
CVSS 6.5 Dossier →
Component: flipper

Insufficient Granularity of Access Control vulnerability in opentext Flipper allows Exploiting Incorrectly Configured Access Control Security Levels. ...

📅 2025-10-20
CVSS 8.8 Dossier →
CVE-2025-8048 MEDIUM
Component: flipper

External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored...

📅 2025-10-20
CVSS 6.5 Dossier →
Component: identity_manager_azuread_driver

A vulnerability identified in OpenText™ Identity Manager AzureAD Driver that allows logging of sensitive information into log file. This impacts all ...

📅 2024-09-12
CVSS 5.8 Dossier →
Component: cx-e_voice

Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily acces...

📅 2024-08-22
CVSS 7.5 Dossier →
CVE-2023-7249 CRITICAL
Component: directory_services

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Directory Services allows Path Trave...

📅 2024-08-12
CVSS 9.8 Dossier →
CVE-2024-6359 MEDIUM
Component: arcsight_intelligence

Privilege escalation vulnerability identified in OpenText ArcSight Intelligence....

📅 2024-08-06
CVSS 6.4 Dossier →
CVE-2024-6358 MEDIUM
Component: arcsight_intelligence

Incorrect Authorization vulnerability identified in OpenText ArcSight Intelligence....

📅 2024-08-06
CVSS 6.3 Dossier →
CVE-2024-6357 MEDIUM
Component: arcsight_intelligence

Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence....

📅 2024-08-06
CVSS 6.3 Dossier →
CVE-2024-6361 MEDIUM
Component: alm_octane

Improper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane. The vulnerability affects all version prior to version 23.4. ...

📅 2024-08-05
CVSS 5.4 Dossier →
Page 1 of 6 (124 Total Records)